Vulnerabilities
Summary — last 7 days
New vulnerabilities4,985▲ 2,192 vs. last week
Critical / high2,726▲ 1,339 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)225▲ 54 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (6.1) | 0.39% | — | Grupoalumne Alumne LMS | 11/28/2023 | 6/17/2026 | A Cross-Site Scripting (XSS) vulnerability has been found in Alumne LMS affecting version 4.0.0.1.08. An attacker could exploit the 'localidad' parameter to inject a custom JavaScript payload and partially take over another user's browser session, due to the lack of proper sanitisation of the 'localidad' field on the… |